src/secure/usr.bin, branch stable/9 FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=stable%2F9 2016-03-07T16:18:07Z Fix multiple OpenSSL vulnerabilities as published in 2016-03-07T16:18:07Z Xin LI delphij@FreeBSD.org 2016-03-07T16:18:07Z urn:sha1:f0c44ef2c340d2a6c4c9152d9c7b9661551f13f6 OpenSSL advisory on 2016/03/01: constant-time MOD_EXP_CTIME_COPY_FROM_PREBUF. [CVE-2016-0702, upstream d6482a8. 5ea08bd, d6d422e, 8fc8f48 317be63 skipped intentionally as we are not using the code on FreeBSD. Backport done by jkim@. Fix memory issues in BIO_*printf functions. [CVE-2016-0799, upstream d889682, a801bf2]. Fix BN_hex2bn/BN_dec2bn NULL ptr/heap corruption. [CVE-2016-0797, upstream 8f65132]. Disable SSLv2 in default negotiation and weak ciphers. [CVE-2016-0800 "DROWN", upstream 56f1acf5]. Note that support of SSLv2 is not removed in order to preserve ABI compatibility, and application may still explicitly ask for vulnerable protocol or ciphers. In collaboration with: jkim MFC r291941: 2016-01-08T00:07:37Z Bryan Drewery bdrewery@FreeBSD.org 2016-01-08T00:07:37Z urn:sha1:27967fcb133507bdd51121f8191f9af13450637a Replace unneeded manual dependency on header by adding it to SRCS. Merge OpenSSL 0.9.8zh. 2015-12-03T21:24:40Z Jung-uk Kim jkim@FreeBSD.org 2015-12-03T21:24:40Z urn:sha1:a59d440da53771a81115e075f7573cf4e4d8f7b6 Merge OpenSSL 0.9.8zg. 2015-06-11T19:39:27Z Jung-uk Kim jkim@FreeBSD.org 2015-06-11T19:39:27Z urn:sha1:d300b5e2d1519d20cece613da46aaa3e611c41d6 Merge OpenSSL 0.9.8zf. 2015-03-20T21:56:48Z Jung-uk Kim jkim@FreeBSD.org 2015-03-20T21:56:48Z urn:sha1:79cfd2802caeeedfe9b45b1091b61fd738d9c9e2 Relnotes: yes Merge OpenSSL 0.9.8zd. 2015-01-09T01:11:43Z Jung-uk Kim jkim@FreeBSD.org 2015-01-09T01:11:43Z urn:sha1:88ccbf9cbd13c597bb2a11986f459ecc74f146b4 Merge OpenSSL 0.9.8zc. 2014-10-15T20:28:31Z Jung-uk Kim jkim@FreeBSD.org 2014-10-15T20:28:31Z urn:sha1:0d01bf528e63a88f0a4b8a35fa2b92c0a0ec7403 Merge OpenSSL 0.9.8zb. 2014-08-07T21:06:34Z Jung-uk Kim jkim@FreeBSD.org 2014-08-07T21:06:34Z urn:sha1:147d24f1481e7cd890ce123191d5f6da6d623027 Correct OpenSSL 0.9.8za release date. 2014-06-09T17:22:49Z Jung-uk Kim jkim@FreeBSD.org 2014-06-09T17:22:49Z urn:sha1:5532940f4712e78cd908b555260213123c2a512e Approved by: re (delphij) Merge OpenSSL 0.9.8za. 2014-06-09T16:30:56Z Jung-uk Kim jkim@FreeBSD.org 2014-06-09T16:30:56Z urn:sha1:9b3686cdf76ea1aeb060cd93cca157356e753786 Approved by: re (kib), so (delphij)